A development team is deploying a containerized microservice to Azure Container Instances (ACI). The containerized microservice must securely connect to a database hosted in an Azure Virtual Network (VNet) without exposing the database to the public internet. The microservice uses a custom Linux-based container image. Which configuration is required to successfully deploy the container group into the Azure Virtual Network?
- The target subnet must be delegated to Microsoft.ContainerInstance/containerGroups and must not contain other resource types.Cevap
- BThe container group must be configured with a system-assigned managed identity to authorize the virtual network integration.
- CThe target subnet must be configured with a service endpoint for Microsoft.Web/serverfarms to allow App Service compute access.
- DThe container group must mount a secret volume containing an Azure Key Vault access policy token to authenticate network requests.
Cevap
The target subnet must be delegated to Microsoft.ContainerInstance/containerGroups and must not contain other resource types.
The correct answer is that the target subnet must be delegated to Microsoft.ContainerInstance/containerGroups and must not contain other resource types. Azure Container Instances requires a dedicated subnet delegated exclusively to ACI for virtual network integration. This subnet cannot be shared with other resource types, such as virtual machines or App Service plans.
Adım Adım Çözüm
Anahtar Kavram
Azure Container Instances Virtual Network Integration and Subnet Delegation
Tahmini Süre:1m 30s